RPKI Certificate
Location:                 ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer (download)

Subject key identifier:   F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F
Authority key identifier: 0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F
Manifest:                 rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
CA Repository:            rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/
Notification URL:         https://rrdp.apnic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2022-07-30T00:00:00Z
    Resources:
    1: AS: 133451
    1: IP: 103.132.232.0/24
    2: IP: 103.212.192.0/23
    3: IP: 103.229.248.0/24
    4: IP: 2001:df1:200::/48

--
$ openssl x509 -text -inform DER -in ./rsync/rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80208 (0x13950)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A90DC5BE/serialNumber=0E65A4F5FD36B5BD68EB3C923408978C907AA79F
        Validity
            Not Before: Dec  7 01:05:45 2021 GMT
            Not After : Jul 30 00:00:00 2022 GMT
        Subject: CN=A9138A50/serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f3:f7:85:b1:b6:8b:66:44:94:5a:d5:6e:4a:
                    30:8a:14:fc:e9:d2:54:fa:2c:fa:75:4a:36:f4:d9:
                    38:b0:8e:cd:25:57:ba:61:34:70:36:5e:56:1a:c0:
                    b9:a6:6c:2a:83:f4:62:26:5e:b3:76:6b:fc:a2:f9:
                    2c:3f:50:56:79:56:ed:2c:b0:3f:83:68:57:c3:ba:
                    ab:0b:b1:c4:e0:b8:6d:16:33:f9:15:54:91:c9:cc:
                    0b:03:bd:92:da:83:e9:70:06:70:ed:d7:4e:e6:d5:
                    a7:89:44:e9:d5:3a:b2:c7:27:b1:3a:09:41:2c:5a:
                    18:9c:38:bc:ec:81:26:d2:52:19:7f:1b:04:55:c1:
                    98:9a:95:0e:a1:58:ab:92:9c:59:c6:fe:fd:e4:07:
                    80:c4:21:02:04:01:e6:29:22:1b:96:65:6b:5f:06:
                    db:12:72:4f:40:3a:36:59:b3:48:45:cf:05:ed:d3:
                    37:47:88:a4:21:5f:a4:80:d2:72:66:a1:c8:58:71:
                    cd:01:b4:fb:19:30:f3:71:b6:b8:a6:d4:1b:9a:ba:
                    25:d6:50:aa:97:ef:32:15:6a:69:ce:e3:73:58:88:
                    83:be:e7:42:87:28:2b:1c:f8:d2:92:d0:85:63:16:
                    88:55:71:22:9c:76:35:09:af:88:4e:e1:c9:35:49:
                    c6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F
            X509v3 Authority Key Identifier: 
                keyid:0E:65:A4:F5:FD:36:B5:BD:68:EB:3C:92:34:08:97:8C:90:7A:A7:9F

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/
                RPKI Manifest - URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  133451

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.232.0/24
                  103.212.192.0/23
                  103.229.248.0/24
                IPv6:
                  2001:df1:200::/48

    Signature Algorithm: sha256WithRSAEncryption
         8c:93:af:6c:1a:76:dc:da:7e:9c:a8:d5:2e:f0:0c:32:d1:d6:
         60:5c:44:5d:eb:00:c8:ba:54:65:23:8a:66:5f:07:0b:79:ad:
         d5:8f:85:9f:76:3b:b1:b4:40:d3:49:e2:16:cd:c6:d3:71:1f:
         c7:df:b0:82:d3:5a:a8:20:c4:ea:fb:22:7e:ec:1f:13:37:bc:
         f8:50:bf:77:88:86:13:fb:9d:d3:b7:7e:98:70:b7:8b:b1:a6:
         5e:85:0c:cc:50:4d:5f:8b:ab:32:b3:9d:29:57:85:a0:bb:05:
         e5:35:a1:81:c3:97:d3:be:9c:e6:f1:0b:79:a6:ca:63:a1:76:
         29:b9:67:39:d3:20:20:ac:5a:26:75:68:e7:27:37:e3:cd:7b:
         a7:b4:15:77:18:6f:22:e3:ef:34:95:27:71:29:22:8d:c4:e2:
         52:5e:1e:63:4e:39:47:80:d3:e7:77:44:01:53:92:97:26:75:
         83:9b:46:75:20:91:4c:19:a5:75:6f:f5:4f:87:c5:3e:45:ef:
         0c:20:87:c7:6a:e9:e1:ae:29:9f:76:42:6c:3b:48:5d:e8:c5:
         32:6e:a5:b1:fd:97:62:dd:57:29:70:39:a0:aa:2a:91:ab:4f:
         61:92:87:67:56:18:d2:5c:8f:ac:07:7e:1f:23:72:45:7e:f6:
         66:a6:7d:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Tue Dec 7 03:44:29 2021 by LibreSSL & rpki-client.